Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/98c5c3-9928-4957-9448-a60138c1c046/1/BADXfvnqDtKVK-L2D6067MLhaKw.mft
File: BADXfvnqDtKVK-L2D6067MLhaKw.mft (raw, json)
Hash identifier: /te8dGa8zVs2yT2jXUNTHZfMyPhMjjXxaUeZuAksU00=
Subject key identifier: B0:AC:8E:0A:14:7E:87:F7:11:4F:A0:D8:3A:3D:97:4E:7D:B0:4E:1A
Authority key identifier: 04:00:D7:7E:F9:EA:0E:D2:95:2B:E2:F6:0F:AD:3A:EC:C2:E1:68:AC
Certificate issuer: /CN=0400d77ef9ea0ed2952be2f60fad3aecc2e168ac
Certificate serial: 0199FCC67319B8EA062C10A0830D0431F62E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BADXfvnqDtKVK-L2D6067MLhaKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/98c5c3-9928-4957-9448-a60138c1c046/1/BADXfvnqDtKVK-L2D6067MLhaKw.mft
Manifest number: 0A03
Signing time: Sun 19 Oct 2025 14:01:27 +0000
Manifest this update: Sun 19 Oct 2025 14:01:27 +0000
Manifest next update: Mon 20 Oct 2025 14:01:27 +0000
Files and hashes: 1: BADXfvnqDtKVK-L2D6067MLhaKw.crl (hash: tXDad6N1RqMbgwCb9FPAHwEgcDB4iJeeNa1kM6b5SlE=)
2: jgMTcyosgm7FIVLeAPtI1RSjhVU.roa (hash: g2bFBV/1uz4ha4E7siEdgYNeYk8szBDsVWWKSTGKJE4=)
3: pO3Lr4jiN61Kn49lUDVd_S0OVvM.roa (hash: mIykw56twR66Kx0cZsZgXBwa4bIpNsTJWsybM0eym2Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/98c5c3-9928-4957-9448-a60138c1c046/1/BADXfvnqDtKVK-L2D6067MLhaKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/98c5c3-9928-4957-9448-a60138c1c046/1/BADXfvnqDtKVK-L2D6067MLhaKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BADXfvnqDtKVK-L2D6067MLhaKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:73:19:b8:ea:06:2c:10:a0:83:0d:04:31:f6:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0400d77ef9ea0ed2952be2f60fad3aecc2e168ac
Validity
Not Before: Oct 19 14:01:27 2025 GMT
Not After : Oct 20 14:01:27 2025 GMT
Subject: CN=b0ac8e0a147e87f7114fa0d83a3d974e7db04e1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1d:b9:62:30:d1:b1:9f:13:92:dc:31:b2:ba:
d5:14:d0:2b:f1:0f:59:cf:af:b7:e4:b9:6c:db:15:
5b:56:ef:02:d5:03:ce:ad:bb:b9:9d:26:11:8e:89:
32:88:d4:fc:31:35:11:5f:dd:a0:53:a0:aa:ef:be:
fc:dd:2f:74:db:64:3c:c8:cf:54:6a:62:e3:16:0a:
7e:42:45:6e:a6:be:f2:42:5f:3c:b2:cf:91:0f:cb:
0a:a5:7b:72:78:4c:03:db:0f:cc:66:6f:70:4e:f7:
33:fc:96:ef:4e:83:6b:b2:d1:3d:f5:ce:d4:22:6d:
e5:99:97:a6:64:70:d5:a1:76:81:0f:20:d0:e2:19:
78:f6:36:e0:98:30:77:89:c7:e3:3a:e4:a4:e6:81:
a3:2f:89:16:f9:a8:b7:41:3b:5b:e8:fb:2d:8d:55:
3a:14:27:1a:73:3b:2c:3f:86:14:a0:e3:b0:c5:99:
1f:3c:5a:eb:40:1b:f1:0d:6a:d8:9a:6e:b1:a4:d3:
fa:a5:e0:2f:db:78:a7:e1:50:e3:cc:86:58:0c:04:
92:21:42:c4:bd:34:7a:9a:99:54:93:84:a5:18:d4:
c4:bb:51:ff:2e:6b:25:55:ee:89:e2:01:4a:20:2b:
ea:75:bb:bc:54:f9:67:d4:c8:97:43:0d:79:f4:b6:
8d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:AC:8E:0A:14:7E:87:F7:11:4F:A0:D8:3A:3D:97:4E:7D:B0:4E:1A
X509v3 Authority Key Identifier:
keyid:04:00:D7:7E:F9:EA:0E:D2:95:2B:E2:F6:0F:AD:3A:EC:C2:E1:68:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BADXfvnqDtKVK-L2D6067MLhaKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/98c5c3-9928-4957-9448-a60138c1c046/1/BADXfvnqDtKVK-L2D6067MLhaKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/98c5c3-9928-4957-9448-a60138c1c046/1/BADXfvnqDtKVK-L2D6067MLhaKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:ef:93:55:ed:35:48:c3:ff:01:44:61:a4:ec:ba:10:60:a6:
e8:d7:be:31:43:ee:8b:fa:43:53:f0:69:cd:56:22:db:17:a1:
e3:0e:3b:36:70:31:c3:77:86:cb:ab:6f:ad:4c:32:16:a8:ac:
ac:73:5c:07:44:b0:7e:ac:3f:1e:56:6f:68:6c:b4:7d:55:fe:
9f:b3:c7:19:e9:44:9f:2d:9d:aa:61:20:0b:0b:97:1f:ec:83:
f5:3a:d8:38:74:aa:3f:43:28:68:bb:a2:15:e0:34:77:82:42:
5c:10:0f:b3:d5:16:20:a1:bc:00:02:b0:f7:8f:04:89:92:a2:
31:94:08:f1:2a:e8:8b:cc:84:b4:f3:ff:aa:00:aa:44:55:70:
eb:36:a2:54:8b:cf:78:9a:48:9f:c5:e6:84:87:9e:f5:58:12:
7a:22:98:c8:d2:eb:ba:08:9f:79:dc:20:f8:9e:0c:9d:5d:0f:
d7:37:c3:48:6f:df:39:ca:42:2a:36:45:c6:ac:04:44:21:7d:
f6:45:0c:71:87:e2:cc:b7:e8:b9:b7:97:05:d6:10:5f:ea:34:
90:73:e7:45:87:f1:b5:b7:27:c8:e2:ad:8e:4b:80:b6:b7:a3:
88:f7:62:4c:2c:e2:51:5f:4a:8b:68:15:9d:9f:a4:84:90:22:
5b:d7:65:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:39:31 2025 by rpki-client